Type:
Test Bank
Resource:
Cryptography and Network Security Principles and Practice
Edition:
7th Edition
Author(s):
William Stallings
Cryptography and Network Security: Principles and Practice, 7th Edition, Global Edition, by William Stallings
CHAPTER 1: COMPUTER AND NETWORK SECURITY CONCEPTS
TRUE OR FALSE 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15.
T F T T F T T F T F T T T F T
MULTIPLE CHOICE 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15.
C B B A B A B A B D B D A C B
.
Cryptography and Network Security: Principles and Practice, 7th Edition, Global Edition, by William Stallings
SHORT ANSWER 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15.
security mechanism active computer security availability encipherment Family Educational Rights and Privacy Act (FERPA) integrity passive attack tree data origin access control Nonrepudiation software attack Notarization
.
Cryptography and Network Security: Principles and Practice, 7th Edition, Global Edition, by William Stallings
CHAPTER 1: COMPUTER AND NETWORK SECURITY CONCEPTS TRUE OR FALSE T
F
1. The OSI security architecture provides a systematic framework for defining security attacks, mechanisms, and services.
T
F
2. Security attacks are classified as either passive or aggressive.
T
F
3. Authentication protocols and encryption algorithms are examples of security mechanisms.
T
F
4. The more critical a component or service, the higher the level of required availability.
T
F
5. Thanks to years of research and development, it is now possible to develop security design and implementation techniques that systematically exclude security flaws and prevent all unauthorized actions.
T
F
6. The field of network and Internet security consists of measures to deter, prevent, detect and correct security violations that involve the transmission of information.
T
F
7. Patient allergy information is an example of an asset with a high requirement for integrity.
T
F
8. The OSI security architecture was not developed as an international standard, therefore causing an obstacle for computer and communication vendors when developing security features.
T
F
9. Data origin authentication does not provide protection against the modification of data units.
T
F
10. The emphasis in dealing with active attacks is on prevention rather than detection.
T
F
11. The connection-oriented integrity service addresses both message stream modification and denial of service.
T
F
12. All the techniques for providing security have two components: a security-related transformation on the information to be sent and some secret information shared by the two principals.
.
Cryptography and Network Security: Principles and Practice, 7th Edition, Global Edition, by William Stallings
T
F
13. An attack tree is a branching hierarchical data structure that represents a set of potential techniques for exploiting security vulnerabilities.
T
F
14. The data integrity service inserts bits into gaps in a data stream to frustrate traffic analysis attempts.
T
F
15. Symmetric encryption is used to conceal the contents of blocks or streams of data of any size, including messages, files, encryption keys, and passwords.
MULTIPLE CHOICE 1. __________ is the most common method used to conceal small blocks of data, such as encryption keys and hash function values, which are used in digital signatures. A) Symmetric encryption
B) Data integrity algorithms
C) Asymmetric encryption
D) Authentication protocols
2. A common technique for masking contents of messages or other information traffic so that opponents can not extract the information from the message is __________ . A) integrity
B) encryption
C) analysis
D) masquerade
3. __________ involves the passive capture of a data unit and its subsequent retransmission to produce an unauthorized effect.
.
A) Disruption
B) Replay
C) Service denial
D) Masquerade